kanske?

home/core/gui/hypr/default.nixbak

@@ -1,23 +0,0 @@
-{
-  wayland.windowManager.hyprland = {
-    enable = true;
-    xwayland.enable = true;
-    settings = {
-      source = [
-        "./land/appearance.conf"
-        "./land/inputs.conf"
-        "./land/keybinds.conf"
-        "./land/rules.conf"
-        "./land/startup.conf"
-      ];
-    };
-
-    systemd = {
-      variables = ["--all"];
-      extraCommands = [
-        "systemctl --user stop graphical-session.target"
-        "systemctl --user start hyprland-session.target"
-      ];
-    };
-  };
-}

home/core/gui/hypr/land/appearance.nix

@@ -12,7 +12,6 @@
       allow_tearing = false;
       resize_on_border = true;
     };
-
     decoration = {
       rounding = 0;
       blur = {
@@ -21,13 +20,11 @@
         passes = 1;
         vibrancy = 0.1696;
       };
-
       drop_shadow = false;
       shadow_range = 4;
       shadow_render_power = 3;
       #    col.shadow = rgba(1a1a1aee)
     };
-
     animations = {
       enabled = true;
       bezier = [
@@ -42,7 +39,6 @@
         "workspaces, 1, 3, default"
       ];
     };
-
     dwindle = {
       # See https://wiki.hyprland.org/Configuring/Dwindle-Layout/ for more
       pseudotile = true; # master switch for pseudotiling. Enabling is bound to mainMod + P in the keybinds section below

home/core/gui/hypr/land/inputs.nix

@@ -9,7 +9,6 @@
     # env = HYPRCURSOR_SIZE,28
     # env = XCURSOR_THEME,macOS
     # env = XCURSOR_SIZE,28
-
     # For all categories, see https://wiki.hyprland.org/Configuring/Variables/
     input = {
       follow_mouse = 1;

home/users/cnst/home.nix

@@ -32,5 +32,5 @@
   systemd.user.startServices = "sd-switch";
 
   # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
-  home.stateVersion = "24.05";
+  home.stateVersion = "23.11";
 }

nixos/hosts/cnix/default.nix

@@ -1,14 +1,15 @@
-{
+{ inputs
-  inputs,
+, outputs
-  outputs,
+, lib
-  lib,
+, config
-  config,
+, pkgs
-  pkgs,
+, system
-  system,
+, ...
-  ...
+}:
-}: let
+let
   ifTheyExist = groups: builtins.filter (group: builtins.hasAttr group config.users.groups) groups;
-in {
+in
+{
   users.users.cnst = {
     isNormalUser = true;
     shell = pkgs.zsh;
@@ -40,31 +41,30 @@ in {
     ./imports.nix
     ./system.nix
     ./hardware-configuration.nix
+    ./substituters.nix
   ];
 
   home-manager.users.cnst = import ../../../home/users/cnst/home.nix;
-  nix = let
-    flakeInputs = lib.filterAttrs (_: lib.isType "flake") inputs;
-  in {
-    settings = {
-      auto-optimise-store = lib.mkDefault true;
-      warn-dirty = false;
-      # Enable flakes and new 'nix' command
-      experimental-features = [
-        "nix-command"
-        "flakes"
-      ];
-      # Opinionated: disable global registry
-      flake-registry = "";
-      # Workaround for https://github.com/NixOS/nix/issues/9574
-      nix-path = config.nix.nixPath;
-    };
-    # Opinionated: disable channels
-    channel.enable = false;
 
-    # Opinionated: make flake registry and nix path match flake inputs
+  nix = {
-    registry = lib.mapAttrs (_: flake: {inherit flake;}) flakeInputs;
+    # pin the registry to avoid downloading and evaling a new nixpkgs version every time
-    nixPath = lib.mapAttrsToList (n: _: "${n}=flake:${n}") flakeInputs;
+    registry = lib.mapAttrs (_: v: { flake = v; }) inputs;
+
+    # set the path for channels compat
+    nixPath = lib.mapAttrsToList (key: _: "${key}=flake:${key}") config.nix.registry;
+
+    settings = {
+      auto-optimise-store = true;
+      builders-use-substitutes = true;
+      warn-dirty = false;
+      experimental-features = [ "nix-command" "flakes" ];
+      flake-registry = "/etc/nix/registry.json";
+
+      # for direnv GC roots
+      keep-derivations = true;
+      keep-outputs = true;
+
+      trusted-users = [ "root" "@wheel" ];
     };
 
     # Bootloader
@@ -86,5 +86,5 @@ in {
     };
 
     # https://nixos.wiki/wiki/FAQ/When_do_I_update_stateVersion
-  system.stateVersion = "24.05";
+    system.stateVersion = lib.mkDefault "23.11";
   }

nixos/hosts/cnix/substituters.nix

@@ -0,0 +1,28 @@
+{
+  nix.settings = {
+    substituters = [
+      # high priority since it's almost always used
+      "https://cache.nixos.org?priority=10"
+
+      "https://anyrun.cachix.org"
+      "https://fufexan.cachix.org"
+      "https://helix.cachix.org"
+      "https://hyprland.cachix.org"
+      "https://nix-community.cachix.org"
+      "https://nix-gaming.cachix.org"
+      "https://yazi.cachix.org"
+    ];
+
+    trusted-public-keys = [
+      "cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY="
+
+      "anyrun.cachix.org-1:pqBobmOjI7nKlsUMV25u9QHa9btJK65/C8vnO3p346s="
+      "fufexan.cachix.org-1:LwCDjCJNJQf5XD2BV+yamQIMZfcKWR9ISIFy5curUsY="
+      "helix.cachix.org-1:ejp9KQpR1FBI2onstMQ34yogDm4OgU2ru6lIwPvuCVs="
+      "hyprland.cachix.org-1:a7pgxzMz7+chwVL3/pzj6jIBMioiJM7ypFP8PwtkuGc="
+      "nix-community.cachix.org-1:mB9FSh9qf2dCimDSUo8Zy7bkq5CX+/rkCWyvRCYg3Fs="
+      "nix-gaming.cachix.org-1:nbjlureqMbRAxR1gJ/f3hxemL9svXaZF/Ees8vCUUs4="
+      "yazi.cachix.org-1:Dcdz63NZKfvUCbDGngQDAZq6kOroIrFoyO064uvLh8k="
+    ];
+  };
+}

nixos/services/greetd/default.nix

@@ -1,16 +1,19 @@
 {pkgs, ...}: {
-  services.greetd = {
+  # greetd display manager
+  services.greetd = let
+    session = {
+      command = "${pkgs.hyprland}/bin/Hyprland";
+      user = "cnst";
+    };
+  in {
     enable = true;
     settings = {
-      # AUTOLOGIN
+      terminal.vt = 1;
-      # initial_session = {
+      default_session = session;
-      #   command = "${pkgs.hyprland}/bin/Hyprland";
+      initial_session = session;
-      #   user = "cnst";
-      # };
-      default_session = {
-        command = "${pkgs.greetd.tuigreet}/bin/tuigreet -r --remember-session --asterisks";
-        user = "greeter";
-      };
     };
   };
+
+  # unlock GPG keyring on login
+  security.pam.services.greetd.enableGnomeKeyring = true;
 }

nixos/services/openssh/default.nix

@@ -1,9 +1,7 @@
 {
   services.openssh = {
     enable = true;
-    ports = [22];
     settings = {
-      AllowUsers = ["toothpick" "cnst"];
       PermitRootLogin = "no";
       PasswordAuthentication = false;
     };